Skip to contentCanonical Ubuntu vulnerabilities
- libvnc project libvncserver, canonical ubuntu linux, debian linux +6 more +8 morelibvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and...CVE-2019-20788Fix available9.8 Critical
- bluez, canonical ubuntu linux, debian linux +1 more +3 moreImproper access control in subsystem for BlueZ before version 5.53 may allow an unauthenticated...CVE-2020-0556Fix available7.1 High
- icu-project international components for unicode, canonical ubuntu linux, debian linux +11 more +13 moreAn issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An...CVE-2020-10531Fix available8.8 High
- twisted, canonical ubuntu linux, debian linux +3 more +5 moreImproper Input Validation in TwistedCVE-2020-10108Fix available9.8 Critical
- twisted, canonical ubuntu linux, debian linux +1 more +3 moreHTTP Request Smuggling in TwistedCVE-2020-10109Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of...CVE-2020-6814Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe first time AirPods are connected to an iPhone, they become named after the user's name by...CVE-2020-6812Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...CVE-2020-6811Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code...CVE-2020-6807Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreBy carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the...CVE-2020-6806Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen removing data about an origin whose tab was recently closed, a use-after-free could occur in...CVE-2020-6805Fix available8.8 High
- gnu glibc, canonical ubuntu linux, debian linux +8 more +10 moreA use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the...CVE-2020-1752Fix available7.0 High
- usrsctp project usrsctp, canonical ubuntu linux, debian linux +2 moreusrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.CVE-2019-20503Fix available6.5 Medium
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreQEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect...CVE-2019-20382Fix available3.5 Low
- timeshift project timeshift, canonical ubuntu linux, fedoraproject fedora +2 moreinit_tmp in TeeJee.FileSystem.vala in Timeshift before 20.03 unsafely reuses a preexisting...CVE-2020-10174Fix available7.0 High
- canonical ubuntu linux, netapp aff 8300 firmware, aff 8700 firmware +30 more +32 moreUbuntu 18.04 Linux kernel i915 incomplete fix for CVE-2019-14615CVE-2020-8832Fix available5.5 Medium
- djangoproject django, canonical ubuntu linux, debian linux +2 more +4 moreSQL injection in DjangoCVE-2020-9402Fix availableEPSS 24.0%8.8 High
- gnu glibc, canonical ubuntu linux, debian linux +11 more +13 moreThe GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range...CVE-2020-10029Fix available5.5 Medium
- webkitgtk, wpewebkit wpe webkit, canonical ubuntu linux +3 more +5 moreaccessibility/AXObjectCache.cpp in WebKit, as used in WebKitGTK through 2.26.4 and WPE WebKit...CVE-2020-10018Fix available9.8 Critical
- php, canonical ubuntu linux, debian linux +1 more +3 moreNull Pointer Dereference in PHP Session Upload ProgressCVE-2020-7062Fix available7.5 High
- pureftpd pure-ftpd, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Pure-FTPd 1.0.49. An uninitialized pointer vulnerability has been...CVE-2020-9274Fix available7.5 High
- opensmtpd, canonical ubuntu linux, debian linux +1 more +3 moreOpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in...CVE-2020-8794Public exploitFix availableEPSS 88.9%9.8 Critical
- opensmtpd, canonical ubuntu linux, fedoraproject fedora +2 moreOpenSMTPD before 6.6.4 allows local users to read arbitrary files (e.g., on some Linux...CVE-2020-8793Public exploitFix available4.7 Medium
- debian linux, linux kernel, canonical ubuntu linux +9 more +11 moreAn issue was discovered in the Linux kernel through 5.5.6. set_fdc in drivers/block/floppy.c...CVE-2020-9383Fix available7.1 High
- apache tomcat, canonical ubuntu linux, debian linux +17 more +19 morePotential HTTP request smuggling in Apache TomcatCVE-2020-1935Fix available4.8 Medium
- ruby-lang rake, canonical ubuntu linux, debian linux +2 more +4 moreOS Command Injection in RakeCVE-2020-8130Fix available6.4 Medium
- sqlite, canonical ubuntu linux, netapp cloud backup +11 more +13 moreIn SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference...CVE-2020-9327Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 morefs/proc/base.c in the Linux kernel through 3.1 allows local users to obtain sensitive keystroke...CVE-2011-4915Fix available5.5 Medium
- libarchive, canonical ubuntu linux, fedoraproject fedora +2 morearchive_read_support_format_rar5.c in libarchive before 3.4.2 attempts to unpack a RAR5 file with...CVE-2020-9308Fix available8.8 High
- linux kernel, canonical ubuntu linux +1 moreThe Linux kernel from v2.3.36 before v2.6.39 allows local unprivileged users to cause a denial of...CVE-2011-24985.5 Medium
- coturn, canonical ubuntu linux, debian linux +1 more +3 moreAn exploitable heap overflow vulnerability exists in the way CoTURN 4.5.1.1 web server parses...CVE-2020-6061Fix available7.0 High
- coturn, canonical ubuntu linux, debian linux +1 more +3 moreAn exploitable denial-of-service vulnerability exists in the way CoTURN 4.5.1.1 web server parses...CVE-2020-6062Fix available5.9 Medium
- linux kernel, linux kernel overlayfs, canonical ubuntu linux +2 moreOverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is...CVE-2012-0055Public exploit7.8 High
- o-dyn collabtive, canonical ubuntu linux, debian linux +2 moreMultiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser...CVE-2015-0258Fix available8.8 High
- mozilla thunderbird, canonical ubuntu linux +1 moreIf a user saved passwords before Thunderbird 60 and then later set a master password, an...CVE-2020-6794Fix available6.5 Medium
- mozilla thunderbird, canonical ubuntu linux +1 moreWhen deriving an identifier for an email message, uninitialized memory was used in addition to...CVE-2020-6792Fix available4.3 Medium
- linux kernel, canonical ubuntu linux, netapp active iq unified manager +7 more +9 moreext4_protect_reserved_inode in fs/ext4/block_validity.c in the Linux kernel through 5.5.3 allows...CVE-2020-8992Fix available5.5 Medium
- htmlunit, apache camel, canonical ubuntu linux +1 more +3 moreCode execution vulnerability in HtmlUnitCVE-2020-5529Fix available8.1 High
- mozilla firefox, canonical ubuntu linux +1 moreMozilla developers reported memory safety bugs present in Firefox 72. Some of these bugs showed...CVE-2020-6801Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers and community members reported memory safety bugs present in Firefox 72 and...CVE-2020-6800Fix available8.8 High
- libgd, canonical ubuntu linux, debian linux +2 more +4 moregdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing...CVE-2018-14553Fix available7.5 High
- debian linux, linuxfoundation runc, canonical ubuntu linux +2 more +4 moreopencontainers runc contains procfs race condition with a shared volume mountCVE-2019-19921Fix available7.0 High
- debian linux, linux kernel, broadcom brocade fabric operating system firmware +6 more +8 moreThere is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the...CVE-2020-8648Fix available7.1 High
- cisco clamav, canonical ubuntu linux +1 moreA vulnerability in the Data-Loss-Prevention (DLP) module in Clam AntiVirus (ClamAV) Software...CVE-2020-3123Fix available7.5 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger...CVE-2019-12528Fix availableEPSS 10.5%7.5 High
- squid-cache squid, canonical ubuntu linux, opensuse leap +2 moreAn issue was discovered in Squid before 4.10. Due to incorrect input validation, the NTLM...CVE-2020-8517Fix available7.5 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client...CVE-2020-8450Fix availableEPSS 71.8%7.3 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret...CVE-2020-8449Fix available7.5 High
- python, canonical ubuntu linux, netapp active iq unified manager +3 more +5 moreLib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service ...CVE-2019-9674Fix available7.5 High
- canonical ubuntu linux, debian linux, point-to-point protocol project protocol +1 more +3 moreeap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and...CVE-2020-8597Public exploitFix availableEPSS 19.9%9.8 Critical
- Show moreLoading…